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DETAILED ACTION 

The instant application having Application No. 10/531939 is presented for 
examination by the examiner. Claims 31 and 32 have been added. Claims 1-32 have 
been examined and considered. 



Response to Amendment 



Drawings 

The drawings filed 4/19/05 are accepted. 



Specification 

The following guidelines illustrate the preferred layout for the specification of a 
utility application. These guidelines are suggested for the applicant's use. 

Arrangement of the Specification 

The specification is objected to because it lacks the appropriate section headers. 

As provided in 37 CFR 1 .77(b), the specification of a utility application should 
include the following sections in order. Each of the lettered items should appear in 
upper case, without underlining or bold type, as a section heading. If no text follows the 
section heading, the phrase "Not Applicable" should follow the section heading: 

TITLE OF THE INVENTION. 

CROSS-REFERENCE TO RELATED APPLICATIONS. 
STATEMENT REGARDING FEDERALLY SPONSORED RESEARCH OR 
DEVELOPMENT. 

THE NAMES OF THE PARTIES TO A JOINT RESEARCH AGREEMENT. 

INCORPORATION-BY-REFERENCE OF MATERIAL SUBMITTED ON A 
COMPACT DISC. 

BACKGROUND OF THE INVENTION. 
Field of the Invention. 
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Description of Related Art including information disclosed under 37 
CFR1.97 and 1.98. 

BRIEF SUMMARY OF THE INVENTION. 

BRIEF DESCRIPTION OF THE SEVERAL VIEWS OF THE 
DRAWING(S). 

DETAILED DESCRIPTION OF THE INVENTION. 

CLAIM OR CLAIMS (commencing on a separate sheet). 

ABSTRACT OF THE DISCLOSURE (commencing on a separate sheet). 

SEQUENCE LISTING (See MPEP § 2424 and 37 CFR 1 .821-1 .825. A 
"Sequence Listing" is required on paper if the application discloses a nucleotide 
or amino acid sequence as defined in 37 CFR 1 .821 (a) and if the required 
"Sequence Listing" is not submitted as an electronic document on compact disc). 



Claim Objections 



Amendments of the claims have overcome the previous objection, therefore the 
objection is withdrawn. 



Response to Arguments 

Applicant's arguments filed 12/9/08 have been fully considered but they are not 
persuasive. In response to the allegation that Jonsson does not teach the limitations of 
claims 1, 5, and 8, Examiner respectfully disagrees. The scope of claims 1 and 8 does 
not in anyway necessitate the absence of a third party in the system. The claim merely 
requires two users at a minimum. In the claims, some operation is requested by a first 
user on a content item. A user certificate controls the rights associated with said 
content item. The authorization is not specifically performed by anyone as interpreted. 
Jonsson teaches all of this. When the requesting user (in Jonsson, the second user) 
wishes to authorize himself, he supplies login credentials. The system checks to makes 
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sure he is authorized before allowing him access to the requested content. An authority 
profile is where the authorization is made. With respect to the amendment, Examiner 
finds this teaching on both page 7, lines 27-35 and page 8, lines 15-25. Here are two 
examples in which the requesting user supplies "information", the former in the form of 
login credentials, and latter in the form of a signal. Here the operation is gaining 
access to some website service. In order for the user to obtain access given to him by 
the other user, he must first supply his login information. 

Secondly, Applicant alleges that prior art Kurokawa fails to teach the limitation of 
both user rights and contents rights as claimed in claims 22 and 23. Examiner 
respectfully disagrees. Claims 22 and 23 have a two step process in which a user is 
identified by a certificate and is governed access to content by a content right. 
Kurokawa might not use the same terminology but the same two step process is being 
achieved. As an example in column 2, from lines 24-45, the two step process unfolds. 
First a user must be validated. This is equivalent to being identified or authorized to the 
system. Next based on his/her identification, he/she is authorized access to content 
based on access rights. These two steps are well known in the art. It provides a way in 
which only certain users can have any access, and specifies which content each user 
has access to. 



Claim Rejections - 35 USC § 101 
35 U.S.C. 101 reads as follows: 
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Whoever invents or discovers any new and useful process, machine, manufacture, or composition of 
matter, or any new and useful improvement thereof, may obtain a patent therefor, subject to the 
conditions and requirements of this title. 

Claims 1-7, 22, and 31 are rejected under 35 U.S.C. 101 based on Supreme 
Court precedent and recent Federal Circuit decisions, a 35 U.S.C § 101 process must 
(1) be tied to a particular machine or (2) transform underlying subject matter (such as an 
article or materials) to a different state or thing. In re Bilski et al, 88 USPQ 2d 1385 
CAFC (2008); Diamond v. DIehr, 450 U.S. 175, 184 (1981); Parker v. Flook, 437 U.S. 
584, 588 n.9 (1978); Gottschalk v. Benson, 409 U.S. 63, 70 (1972); Cochrane v. 
Deener, 94 U.S. 780,787-88 (1876). 

An example of a method claim that would not qualify as a statutory process 
would be a claim that recited purely mental steps. Thus, to qualify as a § 101 statutory 
process, the claim should positively recite the particular machine to which it is tied, for 
example by Identifying the apparatus that accomplishes the method steps, or positively 
recite the subject matter that is being transformed, for example by identifying the 
material that Is being changed to a different state. 

Here, applicant's method steps are not tied to a particular machine and do not 
perform a transformation. Thus, the claims are non-statutory. 

The mere recitation of the machine in the preamble with an absence of a 
machine in the body of the claim fails to make the claim statutory under 35 USC 101 . 
Note the Board of Patent Appeals Informative Opinion Ex parte Langemyeret al. 
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Claims 8-20, 23-30, and 32 are rejected under 35 U.S.C. 101 as directed to non- 
statutory subject matter because the language of the claim raises a question as to 
whether the claim is directed merely to an abstract idea that is not tied to a 
technological art, environment or machine which would result in a practical application 
producing a concrete, useful, and tangible result to form the basis of statutory subject 
matter under 35 U.S.C. 101. The claims mention a device but there is a deficiency in 
structure which would impose that an actual machine and not a program be necessary. 
The acts performed in the claim could be performed by a human as well. 

Claim Rejections - 35 USC § 102 

The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public 
use or on sale in this country, more than one year prior to the date of application for patent in the United States. 

Claims 1,5, 8, and 31 are rejected under 35 U.S.C. 102(b) as being anticipated 
by Jonsson (WO 01/76294 A1). 

With respect to independent claim 1, Jonsson discloses the limitation of 
"authorizing an operation requested by a first user on a content item in accordance with 
a user right identifying a second user and authorizing the second user to perform the 
requested operation on the content item, in which the operation is authorized upon 
receipt of information from the first user (col. 7, lines 27-35) linking a user right of the 



Application/Control Number: 1 0/531 ,939 Page 7 

Art Unit: 2431 

first user and the user right of the second user" (page 2, lines 30-43) as a first user in a 
first client structure is provided with the ability to give a second user assigned to a 
second client structure authority to access said first client structure. It is further noted 
that both users are registered with the access provider (page 4, lines 14-18) and users 
in client structures are provided access to services where service is defined as any type 
of information or object which may be accessible or subject to manipulation (page 3, 
lines 17-19). 

With claim 5, Jonsson discloses the limitation of "the operation comprises at least 
one of: a rendering of the content item, a recording of the content item, a transfer of the 
content item and a creation of a copy of the content item" (page 7, lines 1 1 -1 4) as a 
superuser in this client structure will assign the new employee thereto, with access to 
said piece of information. The level of authority will e.g. include "reading, but not 
revising." 

With respect to independent claim 8, it is rejected in view of the same reasons as 
stated in the rejection of claim 1 . 

As per claim 31 , Jonsson teaches receiving a content right containing necessary 
information for performing the requested operation on the content item, the user right 
certificate of the second user authorizing the second user to perform the requested 
operation using the content right (page 7, lines 27-35) 
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Claims 22 and 23 are rejected under 35 U.S.C. 102(b) as being anticipated by 
Kurokawa (US Patent 6,237,099 B1). 

With respect to independent claim 22, Kurokawa discloses the limitation of 
"authorizing an operation requested by a first user on a content item in accordance with 
a content right containing necessary information for performing the requested operation 
on the content item and a user right identifying the first user and authorizing the first 
user to employ the content right" (pages. 7, lines 27-35). 

With respect to independent claim 23, it is rejected in view of the same reasons 
as stated in the rejection of independent claim 22. 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

A patent may not be obtained though the invention is not identically disclosed or 
described as set forth in section 102 of this title, if the differences between the subject matter 
sought to be patented and the prior art are such that the subject matter as a whole would have 
been obvious at the time the invention was made to a person having ordinary skill in the art to 
which said subject matter pertains. Patentability shall not be negatived by the manner in which 
the invention was made. 

Claims 2-4, 6, 9-14, and 32 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Jonsson (WO 01/76294 A1) in view of Saw et al. (US Patent 
7,020,781 B1). 
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With respect to claim 2, Jonsson discloses the limitation of "the information 
comprises one or more domain certificates identifying the first and second users as 
members of the same authorized domain" (page 2, lines 24-31) as a client structure, 
associated with a service provider, includes a number of associated services made 
available by the access provider and at least one assigned user. Further more, Jonsson 
(page 8, lines 20-25) states that when a user in a client structure wishes to use or order 
a certain service, he sends a signal from his home page to the access provider server 
that determines the specific service provider. Examiner interprets the described client 
structure to be equivalent to the domain comprising of users connected by 
predetermined relationships. Therefore, when the access provider determines if a user 
and a service provider belong to the same client structure, it is equivalent to determining 
if a user and a service provider belong to the same domain. 

It is noted, however, that Jonsson does not specifically disclose that a signal sent 
to acquire access to the provided services comprises the domain certificate. On the 
other hand, the use of digital certificates to identify the parties and establish 
communication channels is commonly known in the art. For example. Saw discloses 
(column 4, lines 42-45) that to print the digital content the print center requests a print 
certificate from the certification authority by sending a print certificate request to the 
certification authority, where (column 3, lines 31-35) the content provider, the print 
center, and the printer have submitted their public keys to the certification authority, and 
the certification authority has issued a unique public key certificate to each of the other 
participants of the system. It would have been obvious to one of the ordinary skill in the 
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art at the time of the invention to incorporate teachings of Saw into the system of 
Jonsson because it would improve the security by implicitly identifying the identity and 
membership of the participants. 

With respect to claim 3, Saw discloses the limitation of "one or more domain 
certificates comprise a first domain certificate identifying the first user as a member of 
an authorized domain, and a second domain certificate identifying the second user as a 
member of the authorized domain" (column 3, lines 31-35) as the content provider, the 
print center, and the printer have submitted their public keys to the certification 
authority, and the certification authority has issued a unique public key certificate to 
each of the other participants of the system. 

With respect to claim 4, Saw discloses the limitation of "one or more domain 
certificates comprise a single certificate identifying the first and second users as 
members of the authorized domain" (column 4, lines 47-50) as to identify the 
participants, the print certificate request may include the public keys of the content 
provider, the print center, and the printer. 

With respect to claim 6, it is rejected in view of the same reasons as stated in the 
rejection of claim 2. 
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With respect to claim 9, it is rejected in view of the same reasons as stated in the 
rejection of claim 2. 

With respect to claim 10, it is rejected in view of the same reasons as stated in 
the rejection of claim 3. 

With respect to claim 1 1 , it is rejected in view of the same reasons as stated in 
the rejection of claim 4. 

With respect to claim 12, Saw discloses the limitation of "receive an identifier for 
the first user from an identification device and to perform the operation if the received 
identifier matches the identification of the first user in the user right of the first user" 
(column 2, lines 1-9) as a content provider waits for a certificate via the network; and 
establishes a secure communication link on the network if the certificate is received. 
The secure link is established with a display device indicated in the certificate. Digital 
content is then sent via the secure link to the display device indicated in the certificate. 

With respect to claim 13, it is rejected in view of the same reasons as stated in 
the rejection of claim 6. 

With respect to claim 14, Saw discloses the limitation of "at least a portion of the 
content right is encrypted using an encryption key for which a corresponding decryption 
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key is available to the device" (column 5, lines 47-50) as the initialization request may 
also include a session symmetric key that can be used to encrypt and decrypt data 
packets to be sent during the transfer of the digital content. 

With respect to claim 32, Jonsson is silent in disclosing extracting a public key 
from the content right and to use the extracted public key in determining whether the 
operation is authorized. Saw teaches this limitation (col. 3, lines 24-28). It is well 
known in the art to user public/private key cryptography. Substituting known equivalent 
technologies which process predictable results is obvious to one of ordinary skill in the 
art. 

Claims 7 and 21 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Jonsson (WO 01/76294) in view of Saw et al. (US Patent 7,020,781 B1 ) as applied to 
claims 1, 2, and 6 and further in view of Messerges et al. (US Publication 2002/0157002 
Al). 

With respect to claim 7, it is noted that neither Jonsson nor Saw specifically 
disclose the limitation of "the operation is not authorized if the content right does not 
identify the authorized domain." However, Messerges discloses the abovementioned 
limitation (page 9, paragraph 0080) as because only registered devices are allowed 
access to the content, a check-in/check-out policy is not needed and a user's 
experience is greatly simplified and enhanced. Security is encountered by an end-user 
only when adding new devices to one or more domains. Since the devices are 
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registered with a domain, it is understood that is a device is not registered with a 
domain it is denied access to the content. It would have been obvious to one of the 
ordinary skill in the art at the time of the invention to incorporate teachings of Messerges 
into the system of Jonsson and Saw to provide security because the devices that are 
not members of the authorized domain are prevented from access to the digital content. 

With respect to claim 21 , it is rejected in view of the same reasons as stated in 
the rejection of claim 7. 



Claims 15-17 and 19 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Jonsson (WO 01/76294) in view of Saw et al. (US Patent 7,020,781 B1 ) and in 
further view of Wyman (US Patent 5,204,897). 

With respect to claim 15, it is noted that neither Jonsson nor Saw specifically 
disclose the limitation of "the content right is provided with a digital signature allowing 
verification of the authenticity of the content right." However, Wyman discloses the 
abovementioned limitation (column 14, lines 50-53) as the decoding algorithm using a 
public key for any signatures is thus used by the license server or delegatee to make 
sure a product use authorization is authentic. It would have been obvious to one of the 
ordinary skill in the art at the time of the invention to incorporate teachings of Wyman 
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into the system of Jonsson and Saw because that would further improve the security of 
the digital content. 

With respect to claim 16, Saw discloses the limitation of "perform the operation if 
the digital signature can be verified successfully using a digital certificate associated 
with an authorized content provider" (column 4, lines 51-54) as the certification authority 
checks its own database of registered participants to verify the validity and authenticity 
of the participants identified in the print certificate request. 

With respect to claim 17, it is rejected in view of the same reasons as stated in 
the rejection of claim 16. 

With respect to claim 19, Saw discloses the limitation of "extracting a public key 
from the content right and to use the extracted public key in determining whether the 
operation is authorized" (column 5, lines 44-47) as the printer initialization request may 
include the printer identifier, the job identifier, the print center's public key and the print 
certificate. 

Claim 18 is rejected under 35 U.S.C. 103(a) as being unpatentable over Jonsson 
(WO 01/76294) in view of Saw et al. (US Patent 7,020,781 B1) and Wyman (US Patent 
5,204,897) and in further view of Moskowitz et al. (WO 01/18628 A2). 
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With respect to claim 18, it is noted that none of Jonsson, Saw, and Wyman 
disclose the limitation of "refuse to perform the operation if the digital signature cannot 
be verified successfully using a digital certificate associated with an authorized content 
provider and a digital watermark associated with the authorized content provider is 
present in the content item." However, Moskowitz discloses (page 3, lines 19-21) that 
the digital data set may be embedded with at lest one robust open watermark, which 
permits the content to be authenticated. It would have been obvious to one of the 
ordinary skill in the art at the time of the invention to incorporate teachings of Moskowitz 
into the system of Jonsson, Saw, and Wyman to improve the security of the digital 
content through the use of watermarks which are intended to prevent or deter 
unauthorized copying of digital media. 

Claim 20 is rejected under 35 U.S.C. 103(a) as being unpatentable over Jonsson 
(WO 01/76294) in view of Saw et al. (US Patent 7,020,781 B1) and in further view of 
Kahn et al (US Patent 6,135,646). 

With respect to claim 20, it is noted that neither Jonsson nor Saw specifically 
disclose the limitation of "determining a robust fingerprint for the content item and to 
refuse to perform the operation if the determined robust fingerprint does not match a 
robust fingerprint comprised in the content right." However, Kahn discloses the 
abovementioned limitation (column 6, line 65 - column 7, line 3) as retaining a copy of 
the properties record for each digital object, a digital signature or other "fingerprint" of 
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the digital object (the digital signature and other fingerprint is typically considerably 
smaller than the object Itself) suitable for verification purposes and a temporal history 
list of related objects. It would have been obvious to combine teachings of Kahn with the 
system of Jonsson and Saw to provide Improved protection for multimedia from 
unauthorized redistribution. 

Claims 24 and 30 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Kurokawa (US Patent 6,237,099 B1) In view of Saw et al. (US Patent 7,020,781 
B1). 

It is noted that Kurokawa does not specifically disclose the limitation of "at least a 
portion of the content right Is encrypted using an encryption key for which a 
corresponding decryption key Is available to the device." However, Saw discloses the 
abovementioned limitation (column 5, lines 47-50) as the initialization request may also 
include a session symmetric key that can be used to encrypt and decrypt data packets 
to be sent during the transfer of the digital content. It would have been obvious to one of 
the ordinary skill In the art to Incorporate teachings of Saw Into the system of Kurokawa 
to provide the Increased protection for the digital content. 

With respect to claim 30, Saw discloses the limitation of "receive an identifier for 
the first user from an Identification device and to perform the operation If the received 
Identifier matches the Identification of the first user In the user right of the first user" 
(column 2, lines 1-9) as a content provider waits for a certificate via the network; and 



Application/Control Number: 1 0/531 ,939 Page 1 7 

Art Unit: 2431 

establishes a secure communication link on the network if the certificate is received. 
The secure link is established with a display device indicated in the certificate. Digital 
content is then sent via the secure link to the display device indicated in the certificate. 
Examiner supplies the same rationale for combining Kurokawa and Saw as recited in 
the rejection of claims 24. 

Claim 25 is rejected under 35 U.S.C. 103(a) as being unpatentable over 
Kurokawa (US Patent 6,237,099 B1) in view of Wyman (US Patent 5,204,897). 

It is noted that Kurokawa does not specifically disclose the limitation of "the 
content fight is provided with a digital signature allowing verification of the authenticity of 
the content right." On the other hand, Wyman discloses the abovementioned limitation 
(column 14, lines 50-53) as the decoding algorithm using a public key for any signatures 
is thus used by the license server or delegatee to make sure a product use 
authorization is authentic. It would have been obvious to one of the ordinary skill in the 
art at the time of the invention to incorporate teachings of Wyman into the system of 
Jonsson and Saw because that would further improve the security of the digital content. 

Claim 26 and 27 is rejected under 35 U.S.C. 103(a) as being unpatentable over 
Kurokawa (US Patent 6,237,099 B1) in view of Wyman (US Patent 5,204,897) and 
further in view of Saw et al. (US Patent 7,020,781 B1). 



Application/Control Number: 1 0/531 ,939 Page 1 8 

Art Unit: 2431 

As per claims 26 and 27, It is noted that neither Kurokawa nor Wyman 
specifically disclose the limitation of "perform the operation if the digital signature can be 
verified successfully using a digital certificate associated with an authorized content 
provider (particular device)." On the other hand, Saw discloses the abovementioned 
limitation (column 4, lines 51-54) as the certification authority checks its own database 
of registered participants to verify the validity and authenticity of the participants 
identified in the print certificate request. It would have been obvious to combine 
teachings of Saw with the system of Kurokawa and Wyman to further improve the 
security of digital content. 

Claim 28 is rejected under 35 U.S.C. 103(a) as being unpatentable over 
Kurokawa (US Patent 6,237,099 B1 ) in view of Wyman (US Patent 5,204,897) and in 
further view of Moskowitz et al. (WO 01/18628 A2). 

With respect to claim 28, it is noted that neither Kurokawa nor Wyman disclose 
the limitation of "refuse to perform the operation if the digital signature cannot be verified 
successfully using a digital certificate associated with an authorized content provider 
and a digital watermark associated with the authorized content provider is present in the 
content item." However, Moskowitz discloses (page 3, lines 19-21) that the digital data 
set may be embedded with at lest one robust open watermark, which permits the 
content to be authenticated. It would have been obvious to one of the ordinary skill in 
the art at the time of the invention to incorporate teachings of Moskowitz into the system 
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of Kurokawa and Wyman to improve the security of the digital content through the use 
of watermarks which are intended to prevent or deter unauthorized copying of digital 
media. 

Claim 29 rejected under 35 U.S.C. 103(a) as being unpatentable over Kurokawa 
(US Patent 6,237,099 B1) in view of Kahn et al (US Patent 6,135,646). 

With respect to claim 20, it is noted Kurokawa does not specifically disclose the 
limitation of "determining a robust fingerprint for the content item and to refuse to 
perform the operation if the determined robust fingerprint does not match a robust 
fingerprint comprised in the content right." However, Kahn discloses the 
abovementioned limitation (column 6, line 65 - column 7, line 3) as retaining a copy of 
the properties record for each digital object, a digital signature or other "fingerprint" of 
the digital object (the digital signature and other fingerprint is typically considerably 
smaller than the object itself) suitable for verification purposes and a temporal history 
list of related objects. It would have been obvious to incorporate teachings of Kahn into 
the system of Kurokawa to provide improved protection for multimedia from 
unauthorized redistribution. 
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Conclusion 

This action is made non-final by virtue of a new grounds of rejection under 35 
use 101. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to MICHAEL R. VAUGHAN whose telephone number is 
(571)270-7316. The examiner can normally be reached on Monday - Thursday, 7:30am 
- 5:00pm, EST. 



If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kim Vu can be reached on 571-272-3859. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 



/M. R. V./ 

Examiner, Art Unit 2431 
/Syed Zia/ 

Primary Examiner, Art Unit 2431 



